User Data Deletion Instructions

• Your guest profile: name, phone, email, nationality, and ID document uploaded at check-in.
• Your booking and stay history, including payments and receipts.
• Messages you exchanged with our resort through Facebook Messenger, Instagram Direct, Telegram, email, or phone, together with the platform user ID used to send them.

You can request deletion of your data in any of the following ways:

1. By email (recommended). Send an email from the address on file to gm@morningtreeresort.com with the subject line "Data Deletion Request". Please include:
   • Your full name
   • Your last booking reference (if you have one)
   • The Facebook / Instagram / Telegram handle you used to contact us, if applicable
2. In person. Visit our reception and ask to submit a data deletion request. Our staff will record it and forward it to the General Manager.
3. In the app. Open Account in the Morning Tree Resort app and submit a deletion request from your signed-in account.

To delete your account in the app, open Account and submit a deletion request. We confirm the request with a fresh one-time passcode sent to your phone. Once you confirm, your access to the account is closed immediately and we issue you a receipt straight away, which you can use to check whether the cleanup of your personal profile is pending or completed.

In the background we remove your personal profile, the photographs of your identity document, your saved sign-in sessions and any messaging links connected to your account. This does not erase everything we hold about you: your booking, payment, invoice and tax records are preserved under the retention rules described below, and deleting your account does not cancel a booking and does not trigger a refund. If you have a stay that has not yet ended, the minimum contact details needed to complete that stay are kept until check-out and removed afterwards. The same phone number can be used again for a new verified paid booking.

• Your guest profile is deleted or anonymised.
• Any Facebook / Instagram / Telegram user ID we hold and the message threads exchanged with our Page are removed from our systems.
• Marketing contact preferences are cleared.

Booking, payment, invoice, and tax records are retained for the minimum period required by Cambodian hospitality and tax law. Where retention is required, we keep only the minimum necessary information and restrict access to authorised staff.

• We acknowledge every request within 7 days.
• We complete deletion within 30 days of receiving your request.
• For requests submitted by email, you will receive a confirmation at the address that submitted the request.